PASSWORD parameter - IBM-JCL

Parameter Type

Keyword, optional

Note: Do not specify this parameter for a started task; if PASSWORD is specified, the job will fail.

Purpose
Use the PASSWORD parameter to identify a current RACF password or specify a new RACF password. You can specify a new password at any time and must specify a new password when your current one expires.

If the installation contains the installation exit routine used to verify the password, a new password specified in the PASSWORD parameter takes effect when the job is read in. The new password takes effect even if the job is held for execution later and may take effect even if the job fails because of JCL errors. When changing the password, other jobs that use the new or old password may fail, depending on when their passwords are verified.

If the installation contains the feature for propagation of the user and group identification, the USER and the PASSWORD parameters are required, and the GROUP parameter is optional on JOB statements only for the following:

  • Batch jobs submitted through an input stream, such as a card reader, (1) if the job requires access to RACF-protected resources or (2) if the installation requires that all jobs have RACF identification.
  • Jobs submitted by one RACF-defined user for another user. In this case, the JOB statement must specify the other user’s userid and may need a password. The group id is optional.
  • Jobs that execute at another network node that uses RACF protection.

Otherwise, the USER, PASSWORD, and GROUP parameters can be omitted from JOB statements. RACF uses the userid, password, and default group id of the submitting TSO/E user or job.

Considerations for an APPC Scheduling Environment

The PASSWORD parameter has no function in an APPC scheduling environment. If you code PASSWORD, the system will check it for syntax and ignore it.

1.Syntax

PASSWORD=(password[,new-password])

You can omit the parentheses if you code only the first subparameter.

2.Subparameter Definition

password
Specifies the user’s current RACF password. The password is 1 through 8 alphanumeric or national ($, #, @) characters.

Note: The system suppresses the value you code for password from the JESJCL and JESJCLIN data sets.

new-password
Specifies the user’s new RACF password. The new-password is 1 through 8 alphanumeric or national ($, #, @) characters. The installation’s security administrator can impose additional restrictions on passwords; follow your installation’s rules.

Note: The system suppresses the value you code for new-password from the JESJCL and JESJCLIN data sets.

3.Relationship to Other Parameters
If the installation does not contain the user and group identification propagation feature:

  • Code a PASSWORD parameter when coding a USER or GROUP parameter on a JOB statement.
  • Code a USER parameter when coding a PASSWORD parameter.

4.Examples of the PASSWORD Parameter

Example

//TEST1 JOB ’D83,123456’,PASSWORD=ABCDE,USER=MYNAME

This JOB statement identifies ABCDE as the current password for the RACF user.

Example

//TEST2 JOB ’D83,123456’,PASSWORD=(BCH,A12),USER=RAC1,GROUP=GRP1

This JOB statement requests that the system change the RACF password from BCH to A12.

All rights reserved © 2020 Wisdom IT Services India Pvt. Ltd DMCA.com Protection Status

IBM-JCL Topics